Is stoneventure.xyz a scam? TrustSniffer's high-risk assessment: 2/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Stone Venture is a Web3-oriented fundraising marketplace. Its landing page invites founders to list projects and invites investors to access private equity, token-sale and convertible-note deals. The presentation is polished: tokenised equity under the ERC-3643 standard, private token sales and SAFT rounds with vesting, SAFE and convertible notes, and bespoke revenue-share or milestone-tranche deals. Visitors are asked to sign up, complete KYB/KYC onboarding, log in and connect a crypto wallet. The apparent business model is on-platform deal closure between founders and investors, with no stated fee structure.

Scam/Impersonation Risk

The risk assessment is elevated and calls for a clearly cautionary stance. The domain is on an external blacklist, and at least one additional threat-intelligence source rated it as suspicious. This is a confirmed adverse reputational signal. No brand impersonation, phishing kit or conflicting legal identities were observed. The concern is therefore not that the site copies a known brand. The concern is that a very young domain collects identity documents and account credentials. It does so while making large claims that cannot be checked against anything: "$2.4B Capital Deployed", "1,500+ vetted investors", "340+ Projects Listed", a "$400M+ raised" figure, a "21d" average time to close, and assurances that offers are "legally binding" and the platform is "compliance-first". The page gives no named legal entity, no address and no checkable team credentials, and it does not say how the platform earns money. Investors would commit capital against claims they cannot test, and the money flow is opaque. Pairing a blacklist hit with unfalsifiable track-record statistics fits the pattern of an advance-fee or fake-deal-flow platform. That pattern is the main concern for this assessment, and it was not confirmed by the evidence. Evidence:

• Homepage: the stat counters ($2.4B deployed, 1,500+ investors, 340+ projects) and the "legally binding" and "compliance-first" wording appear without any supporting documentation or links.
• Homepage: two sensitive forms (sign-up and login) are present, and the page asks for KYB/KYC data and wallet connection.
• Domain registration: registered 2026-06-25 (~0.32 years, roughly four months old).
• Web archive: 1 snapshot, captured in 2026 (1 year tracked), so there is no historical track record.

Regulatory Verification Notes

The site presents itself as a capital-raising venue for securities-like instruments, but it discloses no legal entity name, registered address, licence, regulatory registration or fee schedule. Operator identity could not be independently connected to any real-world person or company. Ownership and governance are opaque, which is an administrative and disclosure concern distinct from any identity contradiction. This matters more here than it would for an ordinary website, because equity, SAFT and convertible-note offerings are normally subject to securities regulation. The page asserts compliance without naming any regulator or registry. No third-party broker or regulatory-database entry corresponds to the site. That absence is not a verdict, but it leaves the "compliance-first" claim without any independent support. Evidence:

• Homepage and onboarding flow: no legal entity, address, licence number or regulator is named anywhere on the page.
• Domain registration: registrar is NICENIC International Group Co., Limited, with registration running to 2027-06-25.
• Transport encryption: TLS certificate issued by YE1 at domain-validation (DV) level, valid to 2026-12-26. DV confirms control of the domain only, not the identity of the operator.
• Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).

What to Verify Next

Before any engagement, the operator's identity and authorisation should be established through sources independent of the site. Start by searching the relevant securities and financial regulators' public registers for any entity named Stone Venture, and treat the absence of a match as significant given the investment-style offerings. The headline figures for capital deployed, funds raised and investor numbers should be tested by asking for named, independently confirmable transactions and counterparties. Any founders or investors the site claims to have served should be contacted directly through their own official channels. The official contact and support channels should be confirmed through an offline or third-party route rather than through links on the site. No identity documents, credentials, wallet approvals or funds should be committed while these checks are open. Evidence:

• Homepage: the team and testimonial sections give names but no verifiable profiles or links to confirm them.
• Homepage: listing, success and service fees are not disclosed, so how the platform earns money cannot be established from the page.
• External reputation: the domain's blacklist status should be rechecked with the listing provider before any decision.

Summary Verdict

The overall posture is high risk. A confirmed external blacklist entry, a domain only months old, unverifiable performance claims and an operator who cannot be identified all point the same way. Technical hygiene such as valid encryption is present, but it does not outweigh the reputational and governance evidence. Legitimacy cannot be accepted on the evidence available.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF. All observed addresses are CDN edge servers, and the origin server was not observable. That limits independent hosting verification and could allow content to be swapped quickly without detection. The infrastructure is mainstream and protective, but it is a mitigating factor only. It says nothing about who operates the site, and it cannot offset the external reputational detections.

Closing Assessment

The site should be limited to passive, read-only viewing. No login, credential submission, identity-document upload, wallet connection or financial commitment should be made on it. Any deal approach that originates from this platform should be treated as unverified until the operator is independently confirmed.